Merge branch '6.4' into 7.1

javiereguiluz · javiereguiluz · commit 8079468ed73c · 2025-01-24T15:28:38.000+01:00
* 6.4: Caddy configuration don't allow sub-directory php files to execute. Fixes #20593
diff --git a/setup/web_server_configuration.rst b/setup/web_server_configuration.rst
@@ -207,6 +207,9 @@ When using Caddy on the server, you can use a configuration like this:
 
         # otherwise, use PHP-FPM (replace "unix//var/..." with "127.0.0.1:9000" when using TCP)
         php_fastcgi unix//var/run/php/php8.3-fpm.sock {
+            # only fallback to root index.php aka front controller.
+            try_files {path} index.php
+
             # optionally set the value of the environment variables used in the application
             # env APP_ENV "prod"
             # env APP_SECRET "<app-secret-id>"
